golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(16.3-02): advance STATE and ROADMAP after plan 02

Browse Source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jakub Zych
2026-10-11 02:08:18 +02:00
parent fd07e2637f
commit 611f98e33b
3 changed files with 15 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.planning/ROADMAP.md
View File

@@ -1044,14 +1044,14 @@ Plans:
5. Module READMEs and `docs/` cover the token API, scopes and CLI commands.
6. The new code has unit tests, delivered in the phase's last plan.
**Plans:** 1/4 plans executed
**Plans:** 2/4 plans executed
Plans:
**Wave 1**
- [x] 16.3-01-PLAN.md — Framework (summercms.go): pact.HasTokenScopes, bouncer scope limit, Allows rewrite (scope before the superuser shortcut), backend_api_tokens migration, composite backend guard, interactive-only marker, route gates, published cabana.ResolveBackend, account token API with OpenAPI and inventories, admin:token:* CLI with party.Activated and summer delegates, READMEs and docs
**Wave 2** *(blocked on Wave 1 completion)*
- [ ] 16.3-02-PLAN.md — Admin SPA API tokens card on My account per UI-SPEC: list states, two-step create with show-once plaintext and copy, revoke, phrase keys, dist, docs
- [x] 16.3-02-PLAN.md — Admin SPA API tokens card on My account per UI-SPEC: list states, two-step create with show-once plaintext and copy, revoke, phrase keys, dist, docs
**Wave 3** *(blocked on Wave 2 completion)*
- [ ] 16.3-03-PLAN.md — Journal: journal and journal:read scopes, token auth through ResolveBackend with byte-identical bodies (reverses Phase 15 D-15), Journal README and the ResolveBackend docs example; release gate (human), summercms tag after v0.1.20, Journal go.mod and host gitlink bumps

21
.planning/STATE.md
View File

@@ -4,16 +4,16 @@ milestone: v1.0
current_phase: "16.3"
current_phase_name: Backend admin personal API tokens with scopes
status: executing
stopped_at: Completed 16.3-01-PLAN.md
last_updated: "2026-10-10T23:56:19.615Z"
stopped_at: Completed 16.3-02-PLAN.md
last_updated: "2026-10-11T00:07:52.680Z"
last_activity: 2026-10-11
last_activity_desc: Completed 16.3-01 framework personal API tokens
state_head: 3019ab188bc3d5a1d1cce3b16bbdd8af19debe55
last_activity_desc: Completed 16.3-02 admin SPA API tokens card
state_head: fd07e2637fce8ca9bd6294ca611e6acc4137ef4a
progress:
total_phases: 40
completed_phases: 13
total_plans: 162
completed_plans: 155
completed_plans: 156
gsd_state_version: "1.0"
milestone_name: milestone
---
@@ -30,9 +30,9 @@ See: .planning/PROJECT.md (updated 2026-09-16)
## Current Position
Phase: 16.3 (Backend admin personal API tokens with scopes) — EXECUTING
Plan: 2 of 4
Plan: 3 of 4
Status: Ready to execute
Last activity: 2026-10-11 — Completed 16.3-01 (framework personal API tokens)
Last activity: 2026-10-11 — Completed 16.3-02 (admin SPA API tokens card)
Progress: [█████░░░░░] 48%
@@ -210,6 +210,7 @@ Progress: [█████░░░░░] 48%
| Phase 16.2 P05 | 25 min | 3 tasks | 7 files |
| Phase 16.2 P06 | 43min | 3 tasks | - files |
| Phase 16.3 P01 | 95 | 4 tasks | 43 files |
| Phase 16.3 P02 | 9 min | 3 tasks | 17 files |
## Accumulated Context
@@ -687,6 +688,8 @@ Recent decisions affecting current work:
- [Phase 16.3]: D-03 literal: one method-allowed scope must match every required code; ScopeLimit keeps per-scope pattern slices — Locked CONTEXT reading; multi-code lists are stricter than a union
- [Phase 16.3]: CLI uses party.Activated at Run time; cabana.RuntimeCommands(app) signature unchanged (Option A) — User-confirmed Option A so host apps only bump versions
- [Phase 16.3]: ResolveBackend is Bearer-only (cookie-less JWT guard) — Plugin write routes have no CSRF; cookie auth must not drive them
- [Phase 16.3]: 16.3-02: ApiTokensPanel + ApiTokenCreateDialog on /account; plaintext dialog-local only; shared ConfirmDialog for revoke and close-without-copy — UI-SPEC component split
- [Phase 16.3]: 16.3-02: expired from API drives Expired chip; dates use CellValue local YYYY-MM-DD / YYYY-MM-DD HH:mm — Plan decisions; no new date format
### Pending Todos
@@ -759,6 +762,6 @@ Items acknowledged and carried forward from previous milestone close:
## Session Continuity
Last session: 2026-10-10T23:56:11.103Z
Stopped at: Completed 16.3-01-PLAN.md
Last session: 2026-10-11T00:07:52.680Z
Stopped at: Completed 16.3-02-PLAN.md
Resume file: None

2
.planning/state.json
View File

@@ -169,5 +169,5 @@
"label": "Advance to the next step",
"reason": "Phase 16.3 of 40 · executing"
},
"updated_at": "2026-10-10T23:55:35.505Z"
"updated_at": "2026-10-11T00:07:52.680Z"
}